IN THE CLAIMS 



Claims 1, 3-4, 10, 14, 17, 20, 22-23, 26, 28-29, and 32 are amended. Claim 33 is 
added. All pending claims are produced below: 

1 . (Currently Amended) A computer implemented method for rolling back a system 
state after a modification failure, the method comprising the steps of: 
a rollback manager creating a restore point on a computer; 
the rollback manager storing a reboot indicator in non-revertible storage; 
the rollback manager monitoring the reboot indicator to detect an unexpected 
reboo t during deployment of a modification, the monitoring compris- 
ing: 

the rollback manager detecting a reboot of the computer, the reboot 

having occurred during the deployment of the modification ; and 
the rollback manager determining based at least in part on the reboot 

indicator whether the reboot was expected or whether the reboot 
was unexpected; and 
responsive at least in part to determining that at least one unexpected reboot 
occurred during the deployment of the modification, the rollback man- 
ager rolling back the system state of the computer according to the re- 
store point ; and 

responsive at least in part to determining that no unexpected reboot occurred 
during the deployment of the modification, the rollback manager indi- 
cating that the deployment of the modification was successful . 
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2. (Canceled) 

3. (Currently Amended) The method of claim 1 wherein the rollback manager creating a 
restore point on a computer further comprises: 

the rollback manager auditing the computer and storing in non-revertible stor- 
age initial audit information concerning identifying at least one item 
from a group of items consisting of: 
at least one currently executing system process; 
at least one currently executing user process; and 
at least one currently open listening port. 

4. (Currently Amended) The method of claim 3, further comprising: 

responsive at least in part to determining that no unexpected reboots reboot oc- 
curred during the deployment of the modification: 
the rollback manager re-auditing the computer and comparing re-audit 

information to the stored initial audit information; and 
the rollback manager performing an appropriate action responsive to 

results of the comparison. 

5. (Original) The method of claim 4 wherein the rollback manager performing an ap- 
propriate action responsive to the comparison further comprises: 

responsive to the comparison revealing that at least one item from the initial 

audit is no longer present on the computer, the rollback manager rolling 
back the system state of the computer according to the restore point. 

6. (Original) The method of claim 4 wherein the rollback manager performing an ap- 
propriate action responsive to the comparison further comprises: 
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responsive to the comparison revealing that all items from the initial audit are 
still present on the computer, the rollback manager deeming the com- 
puter stable. 

7. (Original) The method of claim 6 wherein the rollback manager deeming the com- 
puter stable further comprises: 

the rollback manager clearing the reboot indicator. 

8. (Original) The method of claim 6 further comprising: 

the rollback manager deploying rollback capability on the computer; and 
the rollback manager storing, in non-revertible storage, information concerning 
deployment of the rollback capability on the computer; wherein the 
rollback manager deeming the computer stable further comprises the 
rollback manager disabling the deployed rollback capability. 

9. (Original) The method of claim 4 further comprising: 

the rollback manager waiting for a specified period of time before re-auditing 
the computer, and comparing re-audit information to the stored audit 
information. 

10. (Currently Amended) The method of claim 4 further comprising: 

the rollback manager repeating the following steps a specified number of times 
at specified intervals: 

responsive to determining that no unexpected reboots reboot occurred 
during the deployment of the modification: 
the rollback manager re-auditing the computer and comparing 
re-audit information to the stored audit information; and 
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the rollback manager performing an appropriate action respon- 
sive to results of the comparison. 

(Original) The method of claim 1 further comprising: 

the rollback manager configuring the reboot indicator to indicate that a modifi- 
cation is to be deployed. 

(Original) The method of claim 1 1 further comprising: 

the rollback manager configuring the reboot indicator to indicate that the de- 
ployment of the modification is expected to reboot the computer. 

(Original) The method of claim 12 wherein the rollback manager configuring the re- 
boot indicator to indicate that the deployment of the modification is expected to reboot 
the computer further comprises: 

the rollback manager monitoring deployment of the modification; and 
the rollback manager configuring the reboot indicator responsive to the de- 
ployment requesting a reboot of the computer. 

(Currently Amended) The method of claim 1 wherein the rollback manager monitor- 
ing the reboot indicator to detect an unexpected reboot during deployment of a modifi- 
cation further comprises: 

the rollback manager reading the reboot indicator, the reading performed after 
a reboot of the computer, and the reading performed before a booting 
loading of an operating system. 

(Original) The method of claim 14 further comprising: 

the rollback manager updating the reboot indicator to indicate the occurrence 
of the reboot. 
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16. (Canceled) 

17. (Currently Amended) The method of claim 1 wherein the reboot indicator comprises 
at least one attribute from a group of attributes consisting of: 

an indication of whether a reboot is expected; 

an indication of a specific number of reboots that are expected[[;]] 

and a counter of executed rebootst^nd 

an indication of whether a modification is being deployed . 

18. (Original) The method of claim 1 further comprising: 

the rollback manager deploying rollback capability on the computer; and 
the rollback manager storing, in non-reveitible storage, information concerning 
deployment of the rollback capability on the computer. 

19. (Previously Presented) The method of claim 18, further comprising: 

responsive to the rollback manager rolling back the system state of the com- 
puter according to the restore point, the rollback manager disabling the 
deployed rollback capability. 

20. (Currently Amended) A computer readable storage medium containing an executable 
computer program product for rolling back a system state after a modification failure, 
the computer program product comprising: 

program code for creating a restore point on a computer; 
program code for storing a reboot indicator in non-revertible storage; 
program code for monitoring the reboot indicator to detect an unexpected re 
beet during deployment of a modification, the monitoring comprising: 
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the rollback manager detecting a reboot of the computer, the reboot 

having occurred during the deployment of the modification ; and 

the rollback manager determining based at least in part on the reboot 

indicator whether the reboot was expected or whether the reboot 
was unexpected; and 
program code for, responsive at least in part to determining that at least one 

unexpected reboot occurred during the deployment of the modification, 

rolling back the system state of the computer according to the restore 

point ; and 

program code for, responsive at least in part to determining that no unexpected 
reboot occurred during the deployment of the modification, the roll- 
back manager indicating that the deployment of the modification was 
successful . 

21. (Canceled) 

22. (Currently Amended) The computer readable medium of claim 20 further compris- 
ing: 

program code for auditing the computer and storing in non-revertible storage 
initial audit information concerning identifying at least one item from a 
group of items consisting of: 
at least one currently executing system process; 
at least one currently executing user process; and 
at least one currently open listening port. 

23. (Currently Amended) The computer readable medium of claim 22 further compris- 
ing: 



program code for, responsive at least in part to determining that no unexpected 
reboots reboot occurred during the deployment of the modification: 
re-auditing the computer and comparing re-audit information to the 

stored initial audit information; and 
performing an appropriate action responsive to results of the compari- 



son. 

24. (Original) The computer readable medium of claim 23 further comprising: 



program code for, responsive to the comparison revealing that at least one item 
from the initial audit is no longer present on the computer, rolling back 
the system state of the computer according to the restore point. 



25. (Original) The computer readable medium of claim 23 further comprising: 



program code for, responsive to the comparison revealing that all items from 
the initial audit are still present on the computer, deeming the computer 
stable. 



26. (Previously Presented) A computer system for rolling back a system state after a 
modification failure, the computer system comprising: 



a creation module, configured to create a restore point on a computer; 

a storage module, configured to store a reboot indicator in non-revertible stor- 
age, the storage module being communicatively coupled to the creation 
module; 

a monitoring module, configured to monitor the reboot indicator to detect an 



figured to detect a reboot of the computer, further configured to deter- 
mine based at least in part on the reboot indicator whether the reboot 




during deployment of a modification, further con- 
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was expected or whether the reboot was unexpected, the monitoring 
module being communicatively coupled to the storage module; and 
a rollback module, configured to . responsive at least in part to input from the 
monitoring module indicating that at least one unexpected reboot oc- 
curred during the deployment of the modification, roll back the system 
state of the computer according to the restore point, responsive to input 
from the monitoring module indicating that at least one unexpected re 
boot occurred during the deployment of the modification, the rollback 
module further configured to, responsive at least in part to input from 
the monitoring module indicating that no unexpected reboot occurred 
during the deployment of the modification, indicate that the deploy- 
ment of the modification was successful, the rollback module being 
communicatively coupled to monitoring module. 

27. (Canceled) 

28. (Currently Amended) The computer system of claim 26 further comprising: 

an auditing module, configured to audit the computer, the auditing module be- 
ing communicatively coupled to monitoring module and to the storage 
module; wherein 

the storage module is further configured to store, in non-revertible storage, ini- 
tial audit information concerning identifying at least one item from a 
group of items consisting of: 
at least one currently executing system process; 
at least one currently executing user process; and 
at least one currently open listening port. 
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29. (Currently Amended) The computer system of claim 28 wherein: 

the auditing module is further configured to re-audit the computer, responsive 
at least in part to input from the monitoring module indicating that no 
unexpected reboots reboot occurred during the deployment of the modi- 
fication; the computer system further comprising 

a comparison module, configured to compare re-audit information to the stored 
initial audit information, the comparison module being communica- 
tively coupled to the auditing module and to the rollback module; 
wherein 

the rollback module is further configured to perform an appropriate action re- 
sponsive to input from the comparison module. 

30. (Original) The computer system of claim 29 wherein: 

the rollback module is further configured to roll back the system state of the 
computer according to the restore point, responsive to input from the 
comparison module indicating that at least one item from the initial au- 
dit is no longer present on the computer. 

31. (Original) The computer system of claim 29 further comprising: 

a stability deeming module, configured to deem the computer stable, respon- 
sive to input from the comparison module indicating that all items from 
the initial audit are still present on the computer, the stability deeming 
module being communicatively coupled to the comparison module. 

32. (Currently Amended) A computer implemented method for auditing a computer sys- 
tem state, the method comprising the steps of: 
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a rollback manager auditing the computer and storing in non-revertible storage 
information concerning identifying at least one item from a group of 
items consisting of: 

at least one currently executing system process; 
at least one currently executing user process; and 
at least one currently open listening port. 

(New) The method of claim 1 wherein the reboot indicator comprises at least one at- 
tribute from a group of attributes consisting of: 

an indication of whether a reboot is expected; and 

an indication of whether a modification is being deployed. 
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